# Audit - StellaOps.Provenance.Attestation

## Project
- Path: `src/Provenance/StellaOps.Provenance.Attestation/StellaOps.Provenance.Attestation.csproj`
- Module: `Provenance`
- Kind: `Service`
- SDK: `Microsoft.NET.Sdk`
- TargetFramework: `net10.0`
- Audit date (UTC): 2026-01-30

## Coding Standards Findings
- Status: FAIL
- Nullable: enable
- TreatWarningsAsErrors: explicit true
- Deterministic: inherited true
- 100-line rule violations: 3
- Service locator usage (BuildServiceProvider/GetService): 0
- Analyzer enforcement: missing repo-wide (see summary).

### Details
- 100-line files:
  - `src/Provenance/StellaOps.Provenance.Attestation/Signers.cs` (253 lines)
  - `src/Provenance/StellaOps.Provenance.Attestation/BuildModels.cs` (147 lines)
  - `src/Provenance/StellaOps.Provenance.Attestation/Verification.cs` (102 lines)
- Service locator matches:
  - none

### Fix Guidance
- Split files over 100 lines into smaller types or partials.

## Testing Fullness Findings
- Status: PASS
- Expected layers: Unit
- Detected test projects: src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj [Unit]
- Missing layers: none

### Manual checks required
- Observability contract tests for WebService/Worker.
- Offline execution (tests must run without network access).

### Fix Guidance
- None.